https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-21T04:29:21.685187+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2018-11230 cnvd-2018-11230 2026-10-21T04:29:21.688333+00:00 cnvd-2018-11230 https://cve.radiocsirt.org/vuln/euvd-2026-65324 EUVD-2026-65324 2026-10-21T04:29:21.688367+00:00 EUVD-2026-65324 https://cve.radiocsirt.org/vuln/fkie_cve-2018-11495 fkie_cve-2018-11495 2026-10-21T04:29:21.688381+00:00

OpenCart through 3.0.2.0 allows directory traversal in the editDownload function in admin\model\catalog\download.php via admin/index.php?route=catalog/download/edit, related to the download_id. For example, an attacker can download ../../config.php.

 https://cve.radiocsirt.org/vuln/ghsa-qgrf-34hp-ghm9 GHSA-qgrf-34hp-ghm9 — OpenCart Path Traversal 2026-10-21T04:29:21.688408+00:00

Affected: Packagist: opencart/opencart

OpenCart through 3.0.2.0 allows directory traversal in the `editDownload` function in `admin\model\catalog\download.php` via `admin/index.php?route=catalog/download/edit`, related to the `download_id`. For example, an attacker can download `../../config.php`.

 https://cve.radiocsirt.org/vuln/gsd-2018-11495 gsd-2018-11495 2026-10-21T04:29:21.688431+00:00 gsd-2018-11495